# F5 Big-Ip Access Policy Manager


- [CVE-2023-46747](https://insights.sbomify.com/CVE-2023-46747/): F5 BIG-IP Configuration Utility Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2022-1388](https://insights.sbomify.com/CVE-2022-1388/): F5 BIG-IP Missing Authentication (critical 9.8, exploited in the wild)
- [CVE-2021-22986](https://insights.sbomify.com/CVE-2021-22986/): F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2021-22991](https://insights.sbomify.com/CVE-2021-22991/): F5 BIG-IP Traffic Management Microkernel Buffer Overflow (critical 9.8, exploited in the wild)
- [CVE-2020-5902](https://insights.sbomify.com/CVE-2020-5902/): F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2014-7169](https://insights.sbomify.com/CVE-2014-7169/): GNU Bourne-Again Shell (Bash) Arbitrary Code Execution (critical 9.8, exploited in the wild)
- [CVE-2014-6271](https://insights.sbomify.com/CVE-2014-6271/): GNU Bourne-Again Shell (Bash) Arbitrary Code Execution (critical 9.8, exploited in the wild)
- [CVE-2026-94127](https://insights.sbomify.com/CVE-2026-94127/): F5 BIG-IP APM Heap-based Buffer Overflow (critical 9.3, exploited in the wild)
- [CVE-2025-53521](https://insights.sbomify.com/CVE-2025-53521/): F5 BIG-IP Stack-Based Buffer Overflow (critical 9.3, exploited in the wild)
- [CVE-2023-46748](https://insights.sbomify.com/CVE-2023-46748/): F5 BIG-IP Configuration Utility SQL Injection (high 8.8, exploited in the wild)
- [CVE-2018-14634](https://insights.sbomify.com/CVE-2018-14634/): Linux Kernel Integer Overflow (high 7.8, exploited in the wild)
- [CVE-2023-44487](https://insights.sbomify.com/CVE-2023-44487/): HTTP/2 Rapid Reset Attack (high 7.5, exploited in the wild)

---
From sbomify Insights: https://insights.sbomify.com/products/f5/big-ip-access-policy-manager/